🔗 Multi-Agent Pipelines

One orchestrator. Dozens of sub-agents.
One accountability chain.

Trust Layer's sub-agent delegation model extends the accountability chain one level down — without requiring a separate human sign-off for every child. The full audit trail is in the JWT.

Who this is for

Multi-agent orchestration platformsAI workflow enginesAutonomous agent pipelinesLLM-as-orchestrator architectures

Delegation with a cryptographic paper trail.

Parent credentials, child scopes, cascade revocation — the entire chain is encoded in the JWT and enforced automatically.

1

Mark the parent as delegation-enabled

Register the orchestrator with can_spawn_subagents: true. This is declared by the org at enrollment — not self-asserted by the agent.

2

Sub-agents register under the parent

Each child agent registers under its parent. Trust Layer validates the parent is active, delegation-enabled, and not itself a sub-agent — and that the child's scopes are a strict subset of the parent's.

3

Trust is capped and credentials are linked

A sub-agent's trust level cannot exceed the parent's. The child's credential carries the parent reference, so downstream systems know the full delegation chain from the signed credential alone.

4

Cascade suspension enforced automatically

Every delegation fires an agent.subagent_spawned webhook. If the parent is suspended or retired — for any reason — all its sub-agents are cascade-suspended automatically. One revocation cleans up the whole tree.

Delegation Chain
👤
Human Operator
KYC verified · ENHANCED
Root
↓ authorizes
🤖
Orchestrator Agent
can_spawn_subagents · STRONG
Parent
↓ delegates to
⚙️
Search Agent
web:search · capped STRONG
Sub
⚙️
Code Agent
code:execute · capped STRONG
Sub
⚙️
Data Agent
data:read · capped STRONG
Sub
Suspend parent → all sub-agents suspended instantly

Compliance that scales with your pipeline depth.

🔒

Scope inheritance enforcement

Child agents can only operate within a strict subset of the parent's declared scopes. No privilege escalation. Enforced at registration, not runtime.

📊

Trust level capping

A sub-agent's trust level cannot exceed its parent's. STRONG parent = STRONG maximum for children, regardless of their own declaration completeness.

🔔

Delegation webhooks

Every agent.subagent_spawned event fires a webhook to your org. Full visibility into when and what your orchestrators are spawning — in real time.

🌊

Cascade suspension

Suspend or retire the parent and the entire sub-agent tree is suspended automatically. One action to shut down a compromised pipeline — no manual child cleanup.

Eniyan

Start shipping verifiable trust.
Today. On a free plan.

Pick one product or all three. No credit card to start. Switch or combine whenever you're ready.